Question No: 171 HOTSPOT – (Topic 2)

You install a new server named Server2 that runs Windows Server 2012 R2 and has Network Policy Server (NPS) installed.

You need to ensure that all accounting requests for Server2 are forwarded to Admin1.

On Server2, you create a new remote RADIUS server group named Group1 that contains Admin1.

What should you configure next on Server2?

To answer, select the appropriate node in the answer area.

Answer:

Explanation:

Connection request policies are sets of conditions and settings that allow network administrators to designate which Remote Authentication Dial-In User Service (RADIUS) servers perform the authentication and authorization of connection requests that the server running Network Policy Server (NPS) receives from RADIUS clients. Connection request policies can be configured to designate which RADIUS servers are used for RADIUS accounting.

Question No: 172 – (Topic 2)

You have a file server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.

Files created by users in the human resources department are assigned the Department classification property automatically.

You are configuring a file management task named Task1 to remove user files that have not been accessed for 60 days or more.

You need to ensure that Task1 only removes files that have a Department classification property of human resources. The solution must minimize administrative effort.

What should you configure on Task1?

Configure a file screen

Create a condition

Create a classification rule

Create a custom action

Answer: B Explanation:

Create a File Expiration Task

The following procedure guides you through the process of creating a file management task for expiring files. File expiration tasks are used to automatically move all files that match certain criteria to a specified expiration directory, where an administrator can then back those files up and delete them. Property conditions. Click Add to create a new condition based on the file’s classification. This will open the Property Condition dialog box, which allows you to select a property, an operator to perform on the property, and the value to compare the property against. After clicking OK, you can then create additional conditions, or edit or remove an existing condition.

Question No: 174 – (Topic 2)

You have a custom administrative template file named App1.admx. App1.admx contains application settings for an application named App1.

You copy App1.admx to the central store. You create a new Group Policy object (GPO) named App1.Settings.

When you edit App1.Settings, you receive the warning message shown in the following exhibit.

You need to ensure that you can edit the settings for App1 from the app1_settings GPO.

Modify the permissions of the ADMX file.

Copy an ADML file to the central store.

Add an administrative Template to the App1_settings GPO.

Move the DAMX file to the local Policy definitions folder.

Answer: B Explanation:

This error indicates that the .adml file of Appc1.admx is not found in your central store. Please check whether the App1.adml file exists in #39;\SYSVOL\domainname\Policies\PolicyDefinitions\en-us#39;. (en-us is for English version ADML files)

Question No: 175 HOTSPOT – (Topic 2)

You have two user accounts named User1 and User2. User1 and User2 are the members of a group named Group1. User1 has the Department value set to Accounting, user2 has the Department value set to Marketing. Both users have the Employee Type value set to Contract Employee.

You create the auditing entry as shown in the exhibit. (Click the Exhibit button.)

To answer, complete each statement according to the information presented in the exhibit. Each correct selection is worth one point.

Answer:

Question No: 176 – (Topic 2)

Your network contains an Active Directory domain named contoso.com. The network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Network Policy and Access Services server role installed.

You plan to deploy additional servers that have the Network Policy and Access Services server role installed. You must standardize as many settings on the new servers as possible.

You need to identify which settings can be standardized by using Network Policy Server (NPS) templates.

Which three settings should you identify? (Each correct answer presents part of the solution. Choose three.)

IP filters

shared secrets

health policies

network policies

connection request policies

Answer: A,B,C

Question No: 177 – (Topic 2)

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Desktop Session Host role service installed. The computer account of Server1 resides in an organizational unit (OU) named OU1.

You create and link a Group Policy object (GPO) named GPO1 to OU1.

You need to prevent GPO1 from applying to your user account when you log on to Server1. GPO1 must apply to every other user who logs on to Server1.

What should you configure?

Security Filtering.

WMI Filtering.

Block Inheritance.

Item-level targeting.

Answer: D Explanation:

You can use item-level targeting to change the scope of individual preference items, so they apply only to selected users or computers. Within a single Group Policy object (GPO), you can include multiple preference items, each customized for selected users or

computers and each targeted to apply settings only to the relevant users or computers. Reference: https://technet.microsoft.com/en-us/library/cc733022.aspx

Question No: 178 – (Topic 2)

The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

You need to identify which domain controller must be online when cloning a domain controller.

Which cmdlet should you use?

Get-ADGroupMember

Get-ADDomainControllerPasswordReplicationPolicy

Get-ADDomainControllerPasswordReplicationPolicyUsage

Get-ADDomain

Get-ADOptionalFeature

Get-ADAccountAuthorizationGroup

Answer: D

Explanation: One requirement for cloning a domain controller is an existing Windows Server 2012 DC that hosts the PDC emulator role. You can run the Get-ADDomain and retrieve which server has the PDC emulator role.

Example: Command Prompt: C:\PSgt; Get-ADDomain

Output wouldinclude a line such as: PDCEmulator : Fabrikam-DC1.Fabrikam.com

Incorrect:

Not A: The Get-ADGroupMember cmdlet gets the members of an Active Directory group. Members can be users, groups, and computers.

Not E: The Get-ADOptionalFeature cmdlet gets an optional feature or performs a search to retrieve multiple optional features from an Active Directory.

Not F: The Get-ADAuthorizationGroup cmdlet gets the security groups from the specified user, computer or service accounts token.

Question No: 179 – (Topic 2)

Your network contains an Active Directory domain named contoso.com. The domain contains six domain controllers. The domain controllers are configured as shown in the following table.

The network contains a server named Server1 that has the Hyper-V server role installed. DC6 is a virtual machine that is hosted on Server1.

You need to ensure that you can clone DC6. What should you do?

Transfer the schema master to DC6.

Transfer the PDC emulator to DC5.

Transfer the schema master to DC4.

Transfer the PDC emulator to DC2.

Answer: D Explanation:

A deployed Windows Server 2012 domain controller (virtualized or physical) that hosts the PDC emulator role (DC1). To verify whether the PDC emulator role is hosted on a Windows Server 2012 domain controller, run the following Windows PowerShell command:

You need to update the PATH variable on all of the client computers. Which Group Policy preference should you configure?

Ini Files

Services

Data Sources

Environment

Answer: D Explanation:

Environment Variable preference items allow you to create, update, replace, and delete user and system environment variables or semicolon-delimited segments of the PATH variable. Before you create an Environment Variable preference item, you should review the behavior of each type of action possible with this extension.